1 ; config options 2 ; The island of trust is at example.com 3 server: 4 trust-anchor: "example.com. IN DS 55566 8 2 9c148338951ce1c3b5cd3da532f3d90dfcf92595148022f2c2fd98e5deee90af" 5 val-override-date: "20070916134226" 6 target-fetch-policy: "0 0 0 0 0" 7 qname-minimisation: "no" 8 trust-anchor-signaling: no 9 minimal-responses: no 10 rrset-roundrobin: no 11 ede: yes 12 13 stub-zone: 14 name: "." 15 stub-addr: 193.0.14.129 # K.ROOT-SERVERS.NET. 16 CONFIG_END 17 18 SCENARIO_BEGIN Test validator with scrub of RR for inappropriate length 19 20 ; K.ROOT-SERVERS.NET. 21 RANGE_BEGIN 0 100 22 ADDRESS 193.0.14.129 23 ENTRY_BEGIN 24 MATCH opcode qtype qname 25 ADJUST copy_id 26 REPLY QR NOERROR 27 SECTION QUESTION 28 . IN NS 29 SECTION ANSWER 30 . IN NS K.ROOT-SERVERS.NET. 31 SECTION ADDITIONAL 32 K.ROOT-SERVERS.NET. IN A 193.0.14.129 33 ENTRY_END 34 35 ENTRY_BEGIN 36 MATCH opcode qtype qname 37 ADJUST copy_id 38 REPLY QR NOERROR 39 SECTION QUESTION 40 www.example.com. IN A 41 SECTION AUTHORITY 42 com. IN NS a.gtld-servers.net. 43 SECTION ADDITIONAL 44 a.gtld-servers.net. IN A 192.5.6.30 45 ENTRY_END 46 RANGE_END 47 48 ; a.gtld-servers.net. 49 RANGE_BEGIN 0 100 50 ADDRESS 192.5.6.30 51 ENTRY_BEGIN 52 MATCH opcode qtype qname 53 ADJUST copy_id 54 REPLY QR NOERROR 55 SECTION QUESTION 56 com. IN NS 57 SECTION ANSWER 58 com. IN NS a.gtld-servers.net. 59 SECTION ADDITIONAL 60 a.gtld-servers.net. IN A 192.5.6.30 61 ENTRY_END 62 63 ENTRY_BEGIN 64 MATCH opcode qtype qname 65 ADJUST copy_id 66 REPLY QR NOERROR 67 SECTION QUESTION 68 www.example.com. IN A 69 SECTION AUTHORITY 70 example.com. IN NS ns.example.com. 71 SECTION ADDITIONAL 72 ns.example.com. IN A 1.2.3.4 73 ENTRY_END 74 RANGE_END 75 76 ; ns.example.com. 77 RANGE_BEGIN 0 100 78 ADDRESS 1.2.3.4 79 ENTRY_BEGIN 80 MATCH opcode qtype qname 81 ADJUST copy_id 82 REPLY QR NOERROR 83 SECTION QUESTION 84 example.com. IN NS 85 SECTION ANSWER 86 example.com. IN NS ns.example.com. 87 example.com. 3600 IN RRSIG NS 8 2 3600 20070926134150 20070829134150 55566 example.com. cHdLVCzujUQs6b67c1SmCX+/br4tgOg86Gj/R/x+PKUQmWHyeVwBSTlJuLOHbca3CQoyIQc+V2ilK6fjwjbY/dLk4uOlux8L+Zn7HsUXSOwJPIjsM3LuTa8CYDMvYhOP7KGR+vNpJVSsQ25pyDn6Rzsdl3E7DAf7uSkPV8VJwa8= 88 SECTION ADDITIONAL 89 ns.example.com. IN A 1.2.3.4 90 ns.example.com. 3600 IN RRSIG A 8 3 3600 20070926134150 20070829134150 55566 example.com. PBwNifMNxTXlDorHX1neq1wUhWLmqk+PZ+PBZCI5BJAmakdgOXdLQiVqlKaErJyA/4uN+99fUf6/DqxwgxL8FIPdBkxMOTJaKrCFjEhL6qozTd3+DI6qFJPgTm1lrkpvb9W72MtK2vxAyT5I/bG2SWKdpzOaQXysbDb2hnxq3as= 91 ENTRY_END 92 93 ; response to DNSKEY priming query 94 ENTRY_BEGIN 95 MATCH opcode qtype qname 96 ADJUST copy_id 97 REPLY QR NOERROR 98 SECTION QUESTION 99 example.com. IN DNSKEY 100 SECTION ANSWER 101 example.com. IN DNSKEY 256 3 8 AwEAAdug/L739i0mgN2nuK/bhxu3wFn5Ud9nK2+XUmZQlPUEZUC5YZvm1rfMmEWTGBn87fFxEu/kjFZHJ55JLzqsbbpVHLbmKCTT2gYR2FV2WDKROGKuYbVkJIXdKAjJ0ONuK507NinYvlWXIoxHn22KAWOd9wKgSTNHBlmGkX+ts3hh ;{id = 55566 (zsk), size = 1024b} 102 example.com. 3600 IN RRSIG DNSKEY 8 2 3600 20070926134150 20070829134150 55566 example.com. Ni7Q17l2dzKcAnHdU3Mycpdwo0I6qgGxRvBhBNI43xIUFHJpgKpbeMFxKvVTkbwHyMPMIuHmOaC82IBhOpGD10SExVh4erQhWS3Hvl+m4Cwl3WI9N+AW6CTB9yj+d4xzX3bHjjBt6MSk4bU8ABR7qIoAjgjY7zdtUDWQlaM+d18= 103 SECTION AUTHORITY 104 example.com. IN NS ns.example.com. 105 example.com. 3600 IN RRSIG NS 8 2 3600 20070926134150 20070829134150 55566 example.com. cHdLVCzujUQs6b67c1SmCX+/br4tgOg86Gj/R/x+PKUQmWHyeVwBSTlJuLOHbca3CQoyIQc+V2ilK6fjwjbY/dLk4uOlux8L+Zn7HsUXSOwJPIjsM3LuTa8CYDMvYhOP7KGR+vNpJVSsQ25pyDn6Rzsdl3E7DAf7uSkPV8VJwa8= 106 SECTION ADDITIONAL 107 ns.example.com. IN A 1.2.3.4 108 ns.example.com. 3600 IN RRSIG A 8 3 3600 20070926134150 20070829134150 55566 example.com. PBwNifMNxTXlDorHX1neq1wUhWLmqk+PZ+PBZCI5BJAmakdgOXdLQiVqlKaErJyA/4uN+99fUf6/DqxwgxL8FIPdBkxMOTJaKrCFjEhL6qozTd3+DI6qFJPgTm1lrkpvb9W72MtK2vxAyT5I/bG2SWKdpzOaQXysbDb2hnxq3as= 109 ENTRY_END 110 111 ENTRY_BEGIN 112 MATCH opcode qtype qname 113 ADJUST copy_id 114 REPLY QR AA NOERROR 115 SECTION QUESTION 116 ns.example.com. IN AAAA 117 SECTION AUTHORITY 118 example.com. IN NS ns.example.com. 119 example.com. 3600 IN RRSIG NS 8 2 3600 20070926134150 20070829134150 55566 example.com. cHdLVCzujUQs6b67c1SmCX+/br4tgOg86Gj/R/x+PKUQmWHyeVwBSTlJuLOHbca3CQoyIQc+V2ilK6fjwjbY/dLk4uOlux8L+Zn7HsUXSOwJPIjsM3LuTa8CYDMvYhOP7KGR+vNpJVSsQ25pyDn6Rzsdl3E7DAf7uSkPV8VJwa8= 120 SECTION ADDITIONAL 121 ns.example.com. IN A 1.2.3.4 122 ns.example.com. 3600 IN RRSIG A 8 3 3600 20070926134150 20070829134150 55566 example.com. PBwNifMNxTXlDorHX1neq1wUhWLmqk+PZ+PBZCI5BJAmakdgOXdLQiVqlKaErJyA/4uN+99fUf6/DqxwgxL8FIPdBkxMOTJaKrCFjEhL6qozTd3+DI6qFJPgTm1lrkpvb9W72MtK2vxAyT5I/bG2SWKdpzOaQXysbDb2hnxq3as= 123 ENTRY_END 124 125 ; response to query of interest 126 ENTRY_BEGIN 127 MATCH opcode qtype qname 128 ADJUST copy_id 129 REPLY QR NOERROR 130 SECTION QUESTION 131 www.example.com. IN A 132 SECTION ANSWER 133 www.example.com. IN A 10.20.30.40 134 www.example.com. IN A \# 5 0102030405 135 ; RRSIG includes the malformed record. 136 www.example.com. 3600 IN RRSIG A 8 3 3600 20070926134150 20070829134150 55566 example.com. W4WFu9B81uRvp3Dj8uLIscypznKWuLuKrZqVg1on5/45/3/xyjHvj3TjTL3gruWFXPiQpldvOstXLZ5eN3OpqILdkVey0eqVATujpHwIruY6GWztVx5WptmFfK6E6zzshZ3RmAARqq/czQ+IZli2A9xixdY2H0o1dSU6gohEjjE= 137 SECTION AUTHORITY 138 example.com. IN NS ns.example.com. 139 example.com. 3600 IN RRSIG NS 8 2 3600 20070926134150 20070829134150 55566 example.com. cHdLVCzujUQs6b67c1SmCX+/br4tgOg86Gj/R/x+PKUQmWHyeVwBSTlJuLOHbca3CQoyIQc+V2ilK6fjwjbY/dLk4uOlux8L+Zn7HsUXSOwJPIjsM3LuTa8CYDMvYhOP7KGR+vNpJVSsQ25pyDn6Rzsdl3E7DAf7uSkPV8VJwa8= 140 SECTION ADDITIONAL 141 ns.example.com. IN A 1.2.3.4 142 ns.example.com. 3600 IN RRSIG A 8 3 3600 20070926134150 20070829134150 55566 example.com. PBwNifMNxTXlDorHX1neq1wUhWLmqk+PZ+PBZCI5BJAmakdgOXdLQiVqlKaErJyA/4uN+99fUf6/DqxwgxL8FIPdBkxMOTJaKrCFjEhL6qozTd3+DI6qFJPgTm1lrkpvb9W72MtK2vxAyT5I/bG2SWKdpzOaQXysbDb2hnxq3as= 143 ENTRY_END 144 RANGE_END 145 146 STEP 1 QUERY 147 ENTRY_BEGIN 148 REPLY RD DO 149 SECTION QUESTION 150 www.example.com. IN A 151 ENTRY_END 152 153 ; recursion happens here. 154 STEP 10 CHECK_ANSWER 155 ENTRY_BEGIN 156 MATCH all ede=0 157 REPLY QR RD RA DO SERVFAIL 158 SECTION QUESTION 159 www.example.com. IN A 160 SECTION ANSWER 161 ENTRY_END 162 163 SCENARIO_END 164